LDIF Importer Job Fails Due to LDAP Port/SSL Mismatch in ForgeOps 2025.1.0

[mayur-dorlikar]

Description:
We are encountering an issue with the LDIF Importer job during our ForgeOps 2025.1.0 deployment.

The ds-passwords.sh script is currently configured to connect using the default plain LDAP port 1389 with no SSL (-p 1389).
However, in ForgeOps 2025.1.0, DS pods run secure LDAP (LDAPS) only on port 1636.
Plain LDAP is disabled by default for security reasons.

As a result, the ldif-importer job fails with connection refusal or invalid credentials errors.
This prevents the DS configuration from initializing properly, which blocks AM startup.

[lee-baines]

Hi @mayur-dorlikar, when you migrate to 2025.1.0, you'll need to rebuild DS from 2025.1.0 and rollout the updated pod to get the new security changes and to allow ldif-importer to work. This can still be done with no downtime